It is useful to identify native mode and Internet-based client management configuration for Configuration Manager 2007 clients for both auditing and troubleshooting purposes. You can also use this information to create query-based collections if you need to target computers with a particular configuration with a script, or software distribution package.

The native mode and Internet-based client management configurations described in the following table are stored in the client's hardware inventory, under SMS Advanced Client SSL Configuration.

Note

There is a known issue with Windows XP and Windows Server 2003 64-bit operating systems that do not display this data. This issue is not known to occur on these 64-bit operating systems with Service Pack 2.

If the client has been installed with the CCMSetup client.msi property CCMALWAYSINF=1, this value displays 1 to indicate that the client will always be Internet-based and cannot be managed as an intranet client. If the client has not been installed with this CCMSetup client.msi property, this value displays 0 to indicate that the client can be managed on both the Internet and on the intranet. For more information, see About Configuration Manager Client Installation Properties.

Https State Flags

This displays a bitmask value to indicate whether the client is configured for native mode, CRL checking, and HTTP for site assignment and roaming:

Displays 0 or 1, to indicate the action to take if the Configuration Manager client finds more than one valid certificate for native mode communication, based on the certificate settings specified:

0 indicates that none of the certificates will be used to attempt a connection. The client will not attempt communication with its management point, and instead it will send an error message to its assigned fallback status point.

1 indicates that the client will select any valid and matching certificate for native mode communication if multiple valid certificates are found in the certificate store, unless the client is running Configuration Manager 2007 SP1, in which case the certificate with the longest validity period is selected. If a connection is not successfully made with this certificate, the other certificates found will not be tried and the client will send an error message to its assigned fallback status point.

Use the following procedures to view this configuration information on a single computer by using Resource Explorer, or for multiple computers by creating and running a Configuration Manager query.